This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: QmZ4PyRFjcIrhQ1yXKdvyY+HTp0dLoiSRP8Tzbf+ZRU= Subject key identifier: 83:10:67:81:44:4A:2D:69:3D:20:32:20:07:D5:50:07:68:3D:C4:24 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A4A Signing time: Mon 22 Dec 2025 19:07:47 +0000 Manifest this update: Mon 22 Dec 2025 19:07:47 +0000 Manifest next update: Mon 29 Dec 2025 19:07:47 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: NquHSoLT2md17hV47yLH6oWeHEL5Z3mV0+YkuxFYB0s=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Dec 22 19:07:47 2025 GMT Not After : Dec 29 19:07:47 2025 GMT Subject: CN=69499703-32c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:8c:35:5b:3e:fe:72:cb:00:4a:86:2d:c9: e7:25:97:cf:20:c0:55:5d:99:03:66:a2:4d:41:fb: 38:2d:01:ba:3f:65:13:1f:b6:a0:80:65:d2:fc:23: d9:31:01:c0:c8:04:34:08:10:d1:05:c6:70:e3:b7: 4c:72:c4:01:eb:16:83:66:2b:34:0f:f1:ae:bb:bc: 39:75:07:40:9d:00:bd:71:d1:a3:55:a1:a0:f6:5c: 26:fe:d3:ad:4e:ad:15:3d:8c:5c:a3:a7:0e:bf:05: 6f:f9:56:95:95:64:9f:a8:35:eb:1f:3a:ea:0b:75: f9:87:3d:04:eb:cf:29:97:99:c3:fb:c0:7b:cf:20: a6:0b:30:96:b9:62:8d:2e:8e:6e:b3:1e:f1:38:a4: 06:cd:c3:e9:9e:13:3f:91:c5:0a:84:25:b7:e4:4f: 0c:b7:70:9d:67:51:ba:b8:78:d2:89:bf:28:19:30: 9c:85:a2:c0:84:69:21:4a:df:8a:86:01:88:7b:b3: 71:d1:fb:db:e5:96:12:43:0b:23:c2:92:fa:bc:e3: 1e:2f:d2:0e:98:42:d1:81:5d:49:a0:bc:74:7c:23: 1a:46:10:6a:b8:de:3c:f4:ea:5e:7d:e0:ab:81:69: 47:58:89:40:ce:43:2f:4b:f9:70:4a:93:d1:e2:25: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:67:81:44:4A:2D:69:3D:20:32:20:07:D5:50:07:68:3D:C4:24 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b0:45:74:d5:f4:61:b3:d6:c0:12:1e:ea:e0:b6:14:57:14: f2:38:4e:f1:fa:e3:83:e4:73:ea:a6:d5:19:ba:04:8d:a2:c0: 15:7b:8d:ce:73:40:3c:6d:25:da:b5:f4:b5:c4:27:d2:45:33: 4d:cf:3f:46:86:f7:47:e6:b3:7e:a3:19:45:ae:d1:d9:a7:f5: 12:75:96:a7:26:e6:e3:09:7b:75:63:45:91:35:9c:18:47:d4: 12:fb:ea:9a:0d:88:c5:bb:93:c4:2c:74:c6:25:1e:1f:54:9f: 7a:a1:5a:b3:c4:29:60:f3:28:27:f4:e1:dc:6f:db:47:d6:91: 15:87:1d:94:14:2c:fd:da:15:2e:4a:ea:65:ef:17:8e:9a:ea: d5:ea:a0:bd:39:8d:1d:70:12:96:8b:d3:f3:48:06:e1:06:38: 90:8d:4f:1f:26:e8:06:fd:39:ee:0f:7f:e4:04:7a:23:26:4d: e3:60:54:44:3d:4c:2a:84:67:1d:a8:6b:18:18:5e:b3:7f:e0: 8d:c3:fa:d7:94:f8:c7:4e:10:33:28:1d:7e:6c:83:71:75:e1: 11:3b:05:25:0d:80:bd:dc:49:5f:8e:7f:c5:32:db:16:89:cb: a2:56:b2:1f:70:28:3e:8b:7b:ea:84:5a:f7:46:47:65:11:d7: b5:b4:0c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUxMjIyMTkwNzQ3WhcNMjUxMjI5MTkwNzQ3WjAYMRYwFAYD VQQDDA02OTQ5OTcwMy0zMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KGMNVs+/nLLAEqGLcnnJZfPIMBVXZkDZqJNQfs4LQG6P2UTH7aggGXS/CPZ MQHAyAQ0CBDRBcZw47dMcsQB6xaDZis0D/Guu7w5dQdAnQC9cdGjVaGg9lwm/tOt Tq0VPYxco6cOvwVv+VaVlWSfqDXrHzrqC3X5hz0E688pl5nD+8B7zyCmCzCWuWKN Lo5usx7xOKQGzcPpnhM/kcUKhCW35E8Mt3CdZ1G6uHjSib8oGTCchaLAhGkhSt+K hgGIe7Nx0fvb5ZYSQwsjwpL6vOMeL9IOmELRgV1JoLx0fCMaRhBquN489OpefeCr gWlHWIlAzkMvS/lwSpPR4iWGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMQZ4FE Si1pPSAyIAfVUAdoPcQkMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsEV01fRhs9bAEh7q4LYUVxTyOE7x+uOD5HPqptUZugSNosAVe43O c0A8bSXatfS1xCfSRTNNzz9GhvdH5rN+oxlFrtHZp/USdZanJubjCXt1Y0WRNZwY R9QS++qaDYjFu5PELHTGJR4fVJ96oVqzxClg8ygn9OHcb9tH1pEVhx2UFCz92hUu Supl7xeOmurV6qC9OY0dcBKWi9PzSAbhBjiQjU8fJugG/TnuD3/kBHojJk3jYFRE PUwqhGcdqGsYGF6zf+CNw/rXlPjHThAzKB1+bINxdeEROwUlDYC93Elfjn/FMtsW icuiVrIfcCg+i3vqhFr3RkdlEde1tAzH -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:48 2025 by rpki-client